Red Hat · Resteasy · CVE-2020-1695
**Name of the Vulnerable Software and Affected Versions**
resteasy versions 3.x.x prior to 3.12.0.Final
resteasy versions 4.x.x prior to 4.6.0.Final
**Description**
A flaw was found in resteasy where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed. The issue is related to insufficient input validation, which can be exploited by a remote attacker to modify information.
**Recommendations**
For resteasy versions 3.x.x prior to 3.12.0.Final, update to version 3.12.0.Final or later.
For resteasy versions 4.x.x prior to 4.6.0.Final, update to version 4.6.0.Final or later.
As a temporary workaround, consider implementing proper input validation to prevent illegal headers from being integrated into the server's response.